Consent to processing family members’ data

The consent is drawn up as a separate document (Article 9(1) of Federal Law No. 152-FZ of 27 July 2006 “On personal data”) and is requested when you add a relative to your family on the Platform. The document has two parts: Part 1 is signed by a legal representative on behalf of a child, Part 2 is signed by an adult relative personally. Each part is an independent consent.

Part 1. Consent of a legal representative to processing a child’s data

1.1. Representative and subject

Legal representative (parent, adoptive parent, guardian, custodian): full name, address and identity document details are entered at signing; the account email address is filled in automatically. Basis of authority: the child’s birth certificate or an act of the guardianship authority; the document details are entered at signing (Article 9(6) of the Personal Data Law, Article 64 of the Family Code).

Child (data subject): full name and date of birth are entered at signing.

1.2. Operator

Intellectual Medical Technologies LLC (OOO «IMT»), OGRN 1269600002770, INN 6679188579, address: 620024, Sverdlovsk Region, Yekaterinburg, Bisertskaya St., 16, bldg 1, email privacy@healthrating.net.

1.3. Purposes

Storing and interpreting the child’s test results and home readings on the same terms as for an adult (Consent to processing health data for interpreting test results); the age- and sex-based check-up calendar; counting the child’s participation in the family level.

1.4. The child’s personal data

Full name or profile label, date of birth, sex; special categories of personal data: lab reports, reading values, home readings, marked conditions; facts of completed calendar tasks.

1.5. Actions, methods, processors

Collection, recording, systematisation, accumulation, storage, updating, retrieval, use, anonymisation, blocking, deletion, destruction; automated processing in the Operator’s information systems in the Russian Federation. Processing on the Operator’s instructions is carried out by Selectel JSC (INN 7810962785, 196006, St Petersburg, Tsvetochnaya St., 21, lit. A); other persons are named in the Personal data processing policy. The child’s health data is not passed to third parties, is not used for advertising and is not transferred across borders.

1.6. Term and withdrawal

The consent is valid until the child’s profile is deleted, until withdrawal, or until the child turns 18. On turning 18, the profile is transferred to a separate account at the subject’s own request; until then processing continues on the basis of this consent, and after transfer the subject’s own consent is required. Withdrawal is done by deleting the child’s profile in the account or by a request to privacy@healthrating.net; data is destroyed within 30 days. Withdrawal does not affect the lawfulness of processing carried out before it.

1.7. Signing

Signed with a simple electronic signature in the representative’s account under Section 5 of the Public Offer. The representative confirms that they are entitled to act on behalf of the child and is responsible for the accuracy of the details about their authority.

Part 2. Consent of an adult family member

2.1. Subject

Full name and account email address: filled in from the subject’s profile. The consent is given by the adult relative personally in their own account after receiving an invitation. The family owner cannot consent on behalf of an adult, even at their request.

2.2. Operator

OOO «IMT», details as in 1.2.

2.3. Purpose

One purpose: calculating the family level and the quarterly counter of the family I am joining.

2.4. Data

My calendar completion share in a form anonymised for other family members, and the fact of my family membership. My test results, readings, marked conditions and personal level are not shown to other adult family members and are not included in family figures in identifiable form.

2.5. Actions, methods, processors

As in 1.5.

2.6. What family members see

Each adult sees their own level and points, the family level and the family quarterly counter. The account owner sees the level and points of the profiles they manage themselves (children, and relatives who gave separate consent). There are no public family lists.

2.7. Term and withdrawal

The consent is valid from signing until I leave the family. Leaving is done in my account settings or by a request to privacy@healthrating.net; after leaving, my data is excluded from family figures, and data processed on the basis of the consent is destroyed within 30 days. Withdrawal does not affect the lawfulness of processing carried out before it.

2.8. Signing

Signed with a simple electronic signature in my account under Section 5 of the Public Offer. The Operator stores the date and time of signing, the edition of the text and the account identifiers.